topic Re: Why is difficult getting cluster to work? in Monitoring Splunk

Why is difficult getting cluster to work?

domino30 — Thu, 02 Feb 2023 00:26:56 GMT

Yes indexer clustering. I set up 3 win 10 machines with Splunk Enterprise on them and got them to initially connect to master indexer but then got this error.

on same dns and firewall turned off on all 3 machines.

thanks

Re: Why is difficult getting cluster to work?

shivanshu1593 — Thu, 02 Feb 2023 18:09:26 GMT

The error message in your screenshot indicates that the machine with the same name is already registered. Did you copy/paste Splunk directory from one to the VMs in question? Please check their GUIDs and see if they are matching. If they are, wipe out Splunk on one of them, reinstall and have it join the cluster again.

Re: Why is difficult getting cluster to work?

isoutamo — Thu, 02 Feb 2023 21:46:48 GMT

if you are using a “golden image” then you should follow these steps, not just copy paste. https://docs.splunk.com/Documentation/Splunk/9.0.3/Admin/IntegratefullSplunkontoasystemimage
Otherwise you will get situation which @shivanshu1593 already describe.

r. Ismo